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McGtew et aL t Application No. 09/675,570, filed Sept. 29, 2000 

22. (Currently amended) A computer-readable medium as recited in Claim 1 9, comprising 
further sequences of instructions which, when executed by the one or more processors, 
cause the one or more processors to perform the steps of creating and storing the 
balanced binary tree by creating and storing a stack of A elements wherein the * ,th element 
of said stack stores a state datum for the node on a path from a root node of the tree to 
the leaf node, 

23. (Currently amended) An apparatus as recited in Claim 20, further comprising creating 
and storing the balanced binary tree by creating and storing a stack of A elements wherein 
the z ,th element of said stack stores a state datum for the z -th node on a path from a root 
node of the tree to the leaf node . 

24. (Currently amended) An apparatus as recited in Claim 21, wherein the sequences of 
instructions comprise further sequences of instructions which, when executed by the 
processor, cause the processor to perform the steps of creating and storing the balanced 
binary tree bv creating and storing a stack of h elements wherein the I th element of said 
stack stores a state datum for the z ,ch node on a path from a root node of the tree to the leaf 
n ode, 

25. (New) A computer-readable medium as recited in Claim 22, comprising further 
sequences of instructions which, when executed by the one or more processors, cause the 
one or more processors to perform the steps of creating and storing a state value for a leaf 
node comprises the steps of computing and storing a state value for the leaf node that is 
unique with respect to any other state value that is computed at any other time for any 
other leaf node of the tree . 

26. (New) A computer-readable medium as recited in Claim 19, wherein each leaf node 
stores m bits of state information, wherein m is a multiple of twelve. 
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27. (New) A computer-readable medium as recited in Claim 19. comprising further 
sequences of instructions which, when executed by the one or more processors, cause the 
one or more processors to perform the steps of: 

creating and storing m-Sn bits of state information in each leaf node comprising a 
concatenation of three n bit quantities £| v [ x. wherein n is a multiple of four: 

computing the first non-linear function a and the second non-linear function b as the 

composition of a diffusion function d with the nonlinear "confusion" functions f 
and wherein a = f od and b-sod and wherein 

f(z\y\ x ) =2z\S(R(S(R(y) ) )) \L(S(L(S(x}))) 
efz\v\x) =2z+l\L/S(L(SM)))\S(R(S(R(rx)))) 
d(z\y\x) = z [x + y + z \2x + v J rz 
c(z\y\x) = x®y 

wherein integer addition modulo two is denoted as +. bitwise exclusive-or is denoted as 

® . and bitwise complementation is denoted as H 
wherein the R denotes rotation bv n/4 bits to in a direction of a least significant bit and L 

denotes rotation bv n/4 bits in a direction of a most sig nificant hit; and 
wherein a nonlinear function S comprises a lookup in a key-dependent substitution table. 

28. (New) A computer-readable medium as recited in Claim 19, wherein the third function 
comprises computing a linear reduction of 2n bits of the state value to n bits thereof, 

29. (New) A computer-readable medium as recited in Claim 27, wherein the third function 
comprises computing a bitwise Boolean exclusive OR of x and v. 

30. (New) A computer-readable medium as recited in Claim 27, comprising further 
sequences of instructions which, when executed by the one or more processors, cause the 
one or more processors to perform the steps of creating and storing the substitution table 
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S by selecting four invertible functions and storing the four invertible functions in a 
concatenated form. 

31. (New) A computer-readable medium as recited in Claim 27. comprising farther 
sequences of instructions which, when executed bv the one or more processors, cause the 
one or more processors to perform the steps of computing junctions f and q in seven 
instructions of a central processing unit that can issue two instructions simultaneously, bv 
using five registers to store values of x, y, z. a temporary variable, and a pointer to the 
substitution table 5. 

32. (New) A computer-readable medium as recited in Claim 27. wherein the substitution 
table S comprises an array of key dependent pseudorandom integer values, 

33. (New) A computer-readable medium as recited in Claim 27, wherein the substitution 
table S comprises an array of 256 key dependent pseudorandom 32-bit unsigned integer 
values, 

34. (New) A computer-readable medium as recited in Claim 19. comprising further 
sequences of instructions which, when executed bv the one or more processors, cause the 
one or more processors to perform the steps of creating and storing a key for use by the 
first non-linear function and the second non-linear function, wherein the key comprises a 
table of kev dependent pseudorandom values. 

35. (New) A computer-readable medium as recited in Claim 19. comprising farther 
sequences of instructions which, when executed bv the one or more processors, cause the 
one or more processors to perform the steps of creating and storing, once and at a time 
prior to receiving the location value, a kev for use bv the first non-linear function and the 
second non-linear function, wherein the kev comprises a table of key dependent 
pseudorandom values. 
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36. (New) A computer-readable medium as recited in Claim 19, comprisi ng further 
sequences of instructions which, when executed bv the one or more processors, cause the 
one or more processors to perform the steps of creating and storing a key in the form of a 
plurality of nseudo-randomlv selected invertible functions, wherein each of the invertible 
functions maps an 8-bit portion of the state value to an 8-bit quantity for use as a 
substitute portion of the state value. 

37, (New) A computer-readable medium as recited in Claim 19. wherein the pseudo- 
randomlv selected invertible functions are stored in a plurality of substitution tables, and 
wherein the plurality of substitution tables are generated by: 

setting each of the plurality of substitution tables equal to the identity function; 

for each element of each of the plurality of substitution tables, swapping said element 
with another element of such table in a kev-dependent manner, and also 
perfotming the same swapping operation on each table that has been previously 
been generated. 

38, (New) An apparatus as recited in Claim 23. further comprising creating and storing a 
state value for a leaf node comprises the steps of computing and storing a state value for 
the leaf node that is unique with respect to any other state value that is computed at any 
other time for any other leaf node of the tree. 

39. (New) An apparatus as recited in Claim 20. wherein each leaf node stores m bits of state 
information, wherein m is a multiple of twelve. 



40. (New) An apparatus as recited in Claim 20, further comprising: 

means for creating and storing m~3n bits of state information in each leaf node 
comprising a concatenation of three n bit quantities z| y | x. wherein n is a 
multiple of four: 
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means for computing the first non-linear fiznction a and the second non-linear function h 
as the composition of a diffusion function d with the nonlinear "confusion^ 
functions / and jy. wherein a = / od and b = g od and wherein 

f(z\v\ X ) =2z\srR(S(R M)))\Lfsa,rsrx)))) 

z(z \v\x) =*2z+l\ L (S(L fS M)))\ S(R (S(R fnc)))) 
d(z\v\x) =*z I X + v + z I 2x + y + z 
c(z\y\x)=x®y 

wherein integer addition modulo two is denoted as +. bitwise exclusive-or is denoted as 
0 . and bitwise complementation is denoted as n 

wherein the R denotes rotation bv n/4 bits to in a direction of a least significant bit and L 

denotes rotation bv nIA bits in a direction of a most significant bit: and 
wherein a nonlinear function S comprises a lookup in a key-dependent substitution table. 

41, (New) An apparatus as recited in Claim 20, wherein the third function comprises 
computing a linear reduction of In bits of the state value to n bits thereof. 

42, (New) An apparatus as recited in Claim 40, wherein the third function comprises 
computing a bitwise Boolean exclusive OR of x and y, 

43, (New) An apparatus as recited in Claim 40. further comprising means for creating and 
storing the substitution table S bv selecting four invertible functions and storing the four 
invertible functions in a concatenated form . 

44, (New) An apparatus as recited in Claim 40. further comprising means for computing 
functions /and s in seven instructions of a central processing unit that can issue two 
instructions si multaneously, bv using five registers to store values of x. v. z. a tem porary 
variable, and a pointer to the substitution table S. 

45, (New) An apparatus as recited in Claim 40. wherein the substitution table S comprises an 
array of key dependent pseudorandom integer values. 
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46. (New) An apparatus as recited in Claim 40. wherein the substitution table S comprises an 
array of 256 key dependent pseudorandom 32-bit unsigned integ er values. 

47. (New) An apparatus as recited in Claim 20, further comprising means for creating and 
storing a key for use by the first non-linear function and the second non-linear function, 
wherein the key comprises a table of key dependent pseudorandom values. 

48. (New) An apparatus as recited in Claim 20, further comprising means for creating and 
storing, once and at a time prior to receiving the location value, a key for use by the first 
non-linear function and the second non-linear function, wherein the key comprises a table 
of key dependent pseudorandom values. 

49. (New) An apparatus as recited in Claim 20. further comprising means for creating and 
storing a key in the form of a plurality of pseudo-randomlv selected invertible functions, 
wherein each of the invertible functions maps an 8-bit portion of the state value to an 8- 
bit quantity for use as a substitute portion of the state value. 

50. (New) An apparatus as recited in Claim 20. wherein the pseudo-randomlv selected 
invertible functions are stored in a plurality of substitution tables, and wherein the 
plurality of substitution tables are generated bv means for; 

setting each of the plurality of substitution tables equal to the identity function: 
for each element of each of the plurality of substitution tables, swapping said element 
with another element of such table in a key-dependent manner, and also 
performing the same swapping operation on each table that has been previously 
been generated, 

51. (New) An apparatus as recited in Claim 24, wherein the sequences of instructions 
comprise further sequences of instructions which, when executed bv the processor, cause 
the processor to perform the steps of creating and storing a state value for a leaf node 
comprises the steps of computing and storing a state value for the leaf node that is unique 
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with respect to any other state value that is computed at anv other time for anv other leaf 
node of the tree. 

52, (New) An apparatus as recited in Claim 21. wherein each leaf node stores m bits of state 
information, wherein m is a multiple of twelve. 

53 r (New) An apparatus as recited in Claim 21 , wherein the sequences of instructions 

comprise further sequences of instructions which, when executed bv the processor, cause 
the processor to perform the steps: 

creating and storing m-3n bits of state information in each leaf node comprising a 
concatenation of three n bit quantities z| v I x. wherein n is a multiple of four: 

computing the first non-linear function a and the second non-linear function b as the 

composition of a diffusion function d with the nonlinear "confusion" functions f 
and e» wherein a « f od and b = god and wherein 

f(z\v\x) ~2z\S(R(S(R M))) \L(S(L(S(x)))) 
efz\v\ x) =2z+l\ L(S(L(SM)))\S(R (SfR fnc)))) 
d(z\v\x) = z I x + v + z \2x + y + z 
c(z\y\x)-x®y 

wherein integer addition modulo two is denoted as -h bitwise exclusive-or is denoted as 
® . and bitwise complementation is denoted as h 

wherein the R denotes rotation bv n/4 bits to in a direction of a least significant bit and L 

denotes rotation bv n/4 bits in a direction of a most significant bit: and 
wherein a nonlinear function S comprises a lookup in a kev-dependent substitution table. 

54. (New) An apparatus as recited in Claim 21, wherein the third function comprises 
computing a linear reduction of 2n bits of the state value to n bits thereof 

55. (New) An apparatus as recited in Claim 53. wherein the third function comprises 
computing a bitwise Boolean exclusive OR of x and v. 
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56. (New) An apparatus as recited in Claim 53, wherein the sequences of instructions 
comprise further sequences of instructions which, when executed bv the processor, cause the 
processor t o perform the steps of creating and storing the substitution table Shy selecting four 
invertible functions and storing the four invertible functions in a concatenated form. 

57. (New) An apparatus as recited in Claim 53, wherein the sequences of instructions 
comprise further sequences of instructions which, when executed bv the processor, cause the 
processor to perform the steps of computing functions / and g in seven instructions of a central 
processing unit that can issue two instructions simultaneously, bv using five registers to store 
values of x. v. z. a temporary variable, and a pointer to the substitution table S. 

58. (New) An apparatus as recited in Claim 53, wherein the substitution table S comprises an 
array of key dependent pseudorandom integer values. 

59 ♦ (New) An apparatus as recited in Claim 53, wherein the substitution table S comprises an 
array of 256 key dependent pseudorandom 32-bit unsigned integer values. 

60. (New) An apparatus as recited in Claim 21. wherein the sequences of instructions 
comprise further sequences of instructions which, when executed bv the processor, cause the 
processor to perform the steps of creating and storing a key for use bv the first non-linear 
function and the second non-linear function, wherein the key comprises a table of kev dependent 
pseudorandom values. 

61 . (New) An apparatus as recited in Claim 21. wherein the sequences of instructions 
comprise further sequences of instructions which, when executed bv the processor cause the 
processor to perform the steps of creating and storing, once and at a time prior to receiving the 
location value, a key for use bv the first non-linear function and the second non-linear function, 
wherein the kev comprises a table of kev dependent pseudorandom values. 
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62. (New) An apparatus as redted in Claim 21 , wherein the 



sequences of instructions 
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